So we don't have the logic duplicated, I'd change this to `pinCode.wasVerified(authed_email, req)`